The best way to access something behind CGNAT is using a VPN. You can try getting an Oracle free tier account or just get a cheap VPS and install WireGuard or OpenVPN on it.
Tailscale/Zerotier yes. Other option is tunnel out to a 3rd party VPN server with port forwarding: cloudflare does that, and a number of others.
Cloudflare Tunnels
Thank you, I've signed up with cloudflare and I'm looking at setting that all up. It may end up being a little over my head, but I'll regard it as a learning opportunity.
VPs and then a tunnel in
I have a VPS with NGiNX and tailscale to get stuff thru a NAT.
Cloud flare or VPS tunnels
Is your present ISP the only option for fibre in your area? Most ISPs here in NZ will give you a public static IP for a $5-10 monthly charge or sometimes $50 upfront. That's easier and probably cheaper than dealing with a VPN or other remote access, and doesn't impact performance.
Tailscale Funnels. Your wife doesn't need Tailscale on her device as long as what she needs to access is part of your Tailnet and you set up Funnels.
> I could put Tailscale on my wife's phone, but there's a couple issues there and she'd honestly hate it.
I am just looking into tailscale and wondering what those couple of issues would be?
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
For Example
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.
Useful Lists